topic Hi, in Network Security

Dual WAN with custom routing

mobizent01 — Tue, 12 Mar 2019 07:28:56 GMT

I have a 5506-X

I have a site to site with another location over WAN 1 & we also use this WAN for internet traffic.

I now have an additional WAN connection.

I want traffic from, Local Clients (192.168.2.x), to the remote site to (192.168.1.x) go over WAN 1

I want all Internet traffic go over WAN 2

So my question is:

1. Does 5506-X support dual WAN>

2. How do i set this up?

thanks

Aditya Ganjoo — Mon, 14 Mar 2016 11:43:04 GMT

Hi,

Yes ASA supports this setup with the use of Policy Based routing (PBR):

Its supported now in 9.4

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/general/asa-general-cli/route-policy-based.html

Regards,

Aditya

Please rate helpful posts.

Akshay Rastogi — Mon, 14 Mar 2016 19:27:30 GMT

Hi,

Try to use Manual NAT for your site to site vpn and Object nat for your rest of the traffic. Something like:

object network obj-any

subnet 0 0

nat (inside,wan2) dynamic interface

route wan2 0 0 <wan2 next-hop>

route wan1 0 0 <wan1 next-hop> 255

Object net obj-local-site

subnet 10.1.1.0 255.255.255.0

Object net obj-remote-site

subnet 20.1.1.0 255.255.255.0

nat (inside,wan1) source static obj-local-site obj-local-site destination static obj-remote-site obj-remote-site no-proxy-arp

I think this should work.

Regards,

Akshay Rastogi

Remember to rate helpful posts.